Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisoryFedorapatchFedora 34: 2021-084f819da6 Moderate: libgda TLS Verification Patch
Patch for CVE-2021-39359. ---- Update to 5.2.10. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-084f819da6 2021-12-31 01:34:18.235991 --------------------------------------------------------------------------------Name : libgda Product : Fedora 34 Version : 5.2.10 Release : 4.fc34 URL : https://www.gnome-db.org/ Summary : Library for writing gnome database programs Description : libgda is a library that eases the task of writing Gtk3-based database programs. --------------------------------------------------------------------------------Update Information: Patch for CVE-2021-39359. ---- Update to 5.2.10 --------------------------------------------------------------------------------ChangeLog: * Wed Dec 22 2021 Gwyn Ciesla - 1:5.2.10-4 - Patch CVE-2021-39359. * Tue Sep 14 2021 Sahana Prasad - 1:5.2.10-3 - Rebuilt with OpenSSL 3.0.0 * Thu Jul 22 2021 Fedora Release Engineering - 1:5.2.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Sat Jul 10 2021 Hans de Goede - 1:5.2.10-1 - New upstream bugfix release 5.2.10 - gda_trml2html/2pdf scripts have been ported to python3, restore them - Rebuild against new mdbtools-libs --------------------------------------------------------------------------------References: [ 1 ] Bug #1997146 - CVE-2021-39359 libgda: missing TLS certificate verification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1997146 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-084f819da6' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 30, 2021
Fedora
89
security advisorysecurity updateFedoraFedora 35: 2021-06510d73f1 Important Update for libgda Security Issue
Patch for CVE-2021-39359.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-06510d73f1 2021-12-31 01:20:04.144917 --------------------------------------------------------------------------------Name : libgda Product : Fedora 35 Version : 5.2.10 Release : 4.fc35 URL : https://www.gnome-db.org/ Summary : Library for writing gnome database programs Description : libgda is a library that eases the task of writing Gtk3-based database programs. --------------------------------------------------------------------------------Update Information: Patch for CVE-2021-39359. --------------------------------------------------------------------------------ChangeLog: * Wed Dec 22 2021 Gwyn Ciesla - 1:5.2.10-4 - Patch for CVE-2021-39359 * Tue Sep 14 2021 Sahana Prasad - 1:5.2.10-3 - Rebuilt with OpenSSL 3.0.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1997146 - CVE-2021-39359 libgda: missing TLS certificate verification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1997146 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-06510d73f1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 30, 2021
•Important
Fedora
91
security advisoryGentoocode executionGentoo: GLSA-202301-05 Normal: libdb Buffer Overflow Vulnerability
Two format string vulnerabilities in libgda may lead to the execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200511-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: libgda: Format string vulnerabilities Date: November 02, 2005 Bugs: #110467 ID: 200511-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Two format string vulnerabilities in libgda may lead to the execution of arbitrary code. Background ========= libgda is the library handling the data abstraction layer in the Gnome data access architecture (GNOME-DB). It can also be used by non-GNOME applications to manage data stored in databases or XML files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 gnome-extra/libgda < 1.2.2-r1 > = 1.2.2-r1 Description ========== Steve Kemp discovered two format string vulnerabilities in the gda_log_error and gda_log_message functions. Some applications may pass untrusted input to those functions and be vulnerable. Impact ===== An attacker could pass malicious input to an application making use of the vulnerable libgda functions, potentially resulting in the execution of arbitrary code with the rights of that application. Workaround ========= There is no known workaround at this time. Resolution ========= All libgda users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =gnome-extra/libgda-1.2.2-r1" References ========= [ 1 ] CVE-2005-2958 https://www.cve.org/CVERecord?id=CVE-2005-2958 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200511-01 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Nov 02, 2005
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!